#
## The address on the local server to listen to.
#KUBE_API_ADDRESS="--insecure-bind-address=sz-pg-oam-docker-test-001.tendcloud.com"
KUBE_API_ADDRESS="--advertise-address={{ NODE_IP }} --bind-address={{ NODE_IP }}  --insecure-bind-address=0"
#
## The port on the local server to listen on.
#KUBE_API_PORT="--port=8080"
#
## Port minions listen on
#KUBELET_PORT="--kubelet-port=10250"
#
## Comma separated list of nodes in the etcd cluster
KUBE_ETCD_SERVERS="--etcd-servers={{ ETCD_ENDPOINTS }}"
#
## Address range to use for services
KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range={{ SERVICE_CIDR }}"
#
## default admission control policies
KUBE_ADMISSION_CONTROL="--admission-control=ServiceAccount,NamespaceLifecycle,NamespaceExists,LimitRanger,ResourceQuota"
#
## Add your own!
KUBE_API_ARGS="--authorization-mode=Node,RBAC --runtime-config=rbac.authorization.k8s.io/v1beta1 --kubelet-https=true --anonymous-auth=false --token-auth-file={{ ca_dir }}/token.csv --service-node-port-range={{ NODE_PORT_RANGE }} --tls-cert-file={{ ca_dir }}/kubernetes.pem --tls-private-key-file={{ ca_dir }}/kubernetes-key.pem --client-ca-file=/etc/kubernetes/ssl/ca.pem --service-account-key-file={{ ca_dir }}/ca-key.pem --etcd-cafile={{ ca_dir }}/ca.pem --etcd-certfile={{ ca_dir }}/etcd.pem --etcd-keyfile={{ ca_dir }}/etcd-key.pem --enable-swagger-ui=true --allow-privileged=true --apiserver-count=2 --audit-log-maxage=30 --audit-log-maxbackup=3 --audit-log-maxsize=100 --audit-log-path=/var/lib/audit.log --event-ttl=1h"
